We are currently using SP2010 with ADFS to implement the following scenario:
[Internet]->ADFS with Webform->[SP2010]<-ADFS with Windows Auth<-[Internal Network] SharePoint has only one Url (https://sp2010.publicdomain.com) for both, Internet and Intranet access.
For the migration to SP2013 we would like to get rid off ADFS and use Windows Auth (Kerberos) instead. The issue now: For internet access, there will be no form, but just the default browser credential dialog. However, for internal access this is correct (auto logon within intranet zone, so no login prompt for internal users)
We looked into using a reverse proxy to have a forms based logon for external access, but UAG/TMG is no longer sold and IIS Application Request Routing (which is the new recommendation from Microsoft for reverse proxies) does not support this "forms" scenario.
Important: We cannot extend the SharePoint WebApp and use two different Urls for intern/extern.
Any idea how to solve this? One more thing: We definitely don't want forms based auth only, because internal users must not see a logon prompt.
Thank you very much. If anything is not clear, please add a comment.